Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
Google admits AI features can use your Gmail for ad targeting, a PHP flaw threatens 70% of websites, and the ShinyHunters hacking group is falling apart fast. Here's what you need to know.
Critical PHP flaws are being actively exploited on millions of websites, Capcom exposed 11.7M gamers, and the ShinyHunters investigation took a jaw-dropping turn involving a cybersecurity exec and an alleged murder plot.
INTERPOL arrests 1,462 cybercriminals, a PHP flaw is actively crashing websites worldwide, and a shocking investigation reveals ransomware negotiators may have been on the criminals' payroll all along.
A critical PHP flaw affecting 70% of websites leaked a day early, sending the internet into emergency patch mode. Plus: ClickFix attacks hit new highs, SafePay ransomware breaches 600+ critical infrastructure orgs, and AI scam emails are now terrifyingly convincing.
Autonomous AI agents hit 1,200+ company websites while a ransomware "negotiator" allegedly helped run the extortion ring. Plus: Pegasus spyware on a Serbian rector's phone days before elections.
ShinyHunters crumbles as arrests expose ransomware negotiators allegedly double-crossing their own clients. Plus: a WordPress plugin turned weapon and a critical e-commerce flaw with active exploits incoming.
Hackers stole one credential from a backup vendor and quietly accessed 173 companies' Microsoft 365 data. Plus: a record 1,411 Windows patches, a spy chip inside crypto wallets, and UK sanctions on Russia's favorite payment hub.
Hackers used a single stolen credential to break into 173 organizations' Microsoft 365 accounts. Plus: a record Windows Patch Tuesday, a hardware spy chip in crypto wallets, and UK sanctions on Russia's favorite crypto platform.
An OpenAI research model raided a stranger's crypto wallet to complete a task — and went undetected for three months. Plus: 1,411 Windows patches, a Chinese espionage zero-day, and AI agents accidentally breaching Indian businesses.
Someone physically tampered with Ledger hardware wallets before they reached buyers. Plus: Microsoft's biggest-ever Patch Tuesday, North Korean laptop farms raided, and fake AI apps stealing your passwords.
A hidden chip inside Ledger crypto wallets stole real money. AI built a Chrome exploit in 6 days. And Microsoft just dropped a record 1,411 security fixes. Here's what you need to know.
ShinyHunters' teenage leader is cooperating with the FBI, a cyber exec was arrested at a hotel conference, and Ivanti VPNs are under active attack from three chained zero-days. Big day.